Fortinetは2024年最新のNSE7_SDW-7.0テスト解説（更新されたのは70問があります)
NSE7_SDW-7.0試験問題集を提供していますFortinet問題
質問 # 21
Which three matching traffic criteria are available in SD-WAN rules? (Choose three.)
- A. Application signatures
- B. Source and destination IP address
- C. Type of physical link connection
- D. URL categories
- E. Internet service database (ISDB) address object
正解：A、B、E
質問 # 22
Which two statements describe how IPsec phase 1 main mode is different from aggressive mode when performing IKE negotiation? (Choose two )
- A. XAuth is enabled as an additional level of authentication, which requires a username and password.
- B. The use of Diffie Hellman keys is limited by the responder and needs initiator acceptance.
- C. A peer ID is included in the first packet from the initiator, along with suggested security policies.
- D. A total of six packets are exchanged between an initiator and a responder instead of three packets.
正解：A、D
質問 # 23
Refer to the exhibits.
Exhibit A
Exhibit B -
Exhibit A shows the configuration for an SD-WAN rule and exhibit B shows the respective rule status, the routing table, and the member status.
The administrator wants to understand the expected behavior for traffic matching the SD-WAN rule.
Based on the exhibits, what can the administrator expect for traffic matching the SD-WAN rule?
- A. The traffic will be routed over T_INET_1_0.
- B. The traffic will be load balanced across all three overlays.
- C. The traffic will be routed over T_INET_0_0.
- D. The traffic will be routed over T_MPLS_0.
正解：D
質問 # 24
Refer to the exhibit.
Which algorithm does SD-WAN use to distribute traffic that does not match any of the SD-WAN rules?
- A. All traffic from a source IP to a destination IP is sent to the least used interface.
- B. All traffic from a source IP is sent to the most used interface.
- C. All traffic from a source IP to a destination IP is sent to the same interface.
- D. All traffic from a source IP is sent to the same interface.
正解：C
質問 # 25
Which CLI command do you use to perform real-time troubleshooting for ADVPN negotiation?
- A. get ipsec tunnel list
- B. diagnose vpn tunnel list
- C. get router info routing-table all
- D. diagnose debug application ike
正解：D
質問 # 26
Refer to the exhibit.
Which statement about the role of the ADVPN device in handling traffic is true?
- A. This is a spoke that has received a query from a remote hub and has forwarded the response to its hub.
- B. Two hubs, 10.0.1.101 and 10.0.2.101, are receiving and forwarding queries between each other.
- C. Two spokes, 192.2.0.1 and 10.0.2.101, forward their queries to their hubs.
- D. This is a hub that has received a query from a spoke and has forwarded it to another spoke.
正解：D
質問 # 27
What is the route-tag setting in an SD-WAN rule used for?
- A. To indicate the destination of a rule based on learned BGP prefixes.
- B. To indicate the routes for health check probes.
- C. To indicate the routes that can be used for routing SD-WAN traffic.
- D. To indicate the members that can be used to route SD-WAN traffic.
正解：A
質問 # 28
Refer to the exhibit.
The device exchanges routes using IBGP.
Which two statements are correct about the IBGP configuration and routing information on the device?
(Choose two.)
- A. additional-path is enabled.
- B. ibgp-multipath is disabled.
- C. You can run the get router info routing-table database command to display the additional paths.
- D. Each BGP route is three hops away from the destination.
正解：A、C
質問 # 29
Refer to the exhibit.
FortiGate has multiple dial-up VPN interfaces incoming on port1 that match only FIRST_VPN.
Which two configuration changes must be made to both IPsec VPN interfaces to allow incoming connections to match all possible IPsec dial-up interfaces? (Choose two.)
- A. Use unique Diffie Hellman groups on each VPN interface.
- B. Use different proposals are used between the interfaces.
- C. Specify a unique peer ID for each dial-up VPN interface.
- D. Configure the IKE mode to be aggressive mode.
正解：C、D
質問 # 30
Which best describes the SD-WAN traffic shaping mode that bases itself on a percentage of available bandwidth?
- A. Reverse-policy shaping mode
- B. Shared-policy shaping mode
- C. Per-IP shaping mode
- D. Interface-based shaping mode
正解：D
解説：
Explanation
Interface-based shaping goes further, enabling traffic controls based on percentage of the interface bandwidth.
質問 # 31
Which two tasks are part of using central VPN management? (Choose two.)
- A. You can configure full mesh, star, and dial-up VPN topologies.
- B. You configure VPN communities to define common IPsec settings shared by all VPN gateways.
- C. You must enable VPN zones for SD-WAN deployments.
- D. FortiManager installs VPN settings on both managed and external gateways.
正解：A、B
質問 # 32
Refer to the exhibit.
Based on the output shown in the exhibit, which two criteria on the SD-WAN member configuration can be used to select an outgoing interface in an SD-WAN rule? (Choose two.)
- A. Set source 100.64.1.1.
- B. Set load-balance-mode source-ip-ip-based.
- C. Set priority 10.
- D. Set cost 15.
正解：C、D
質問 # 33
Refer to the exhibit.
Based on the exhibit, which two actions does FortiGate perform on sessions after a firewall policy change? (Choose two.)
- A. FortiGate does not change existing sessions.
- B. FortiGate flushes all sessions.
- C. FortiGate evaluates new sessions.
- D. FortiGate terminates the old sessions.
正解：A、C
解説：
FortiGate not to flag existing impacted session as dirty by setting firewall-session-dirty to check new. The results is that FortiGate evaluates only new session against the new firewall policy.
質問 # 34
Which two statements are correct when traffic matches the implicit SD-WAN rule? (Choose two.)
- A. Traffic is load balanced using the algorithm set for the v4-ecmp-mode setting.
- B. All SD-WAN rules have the default setting enabled.
- C. Traffic does not match any of the entries in the policy route table.
- D. The sdwan_service_id flag in the session information is 0.
正解：C、D
質問 # 35 
Two hub-and-spoke groups are connected through a site-to-site IPsec VPN between Hub 1 and Hub 2. The administrator configured ADVPN on both hub-and-spoke groups.
Which two outcomes are expected if a user in Toronto sends traffic to London? (Choose two.)
- A. The first packets from Toronto to London are routed through Hub 1 then to Hub 2.
- B. Traffic from Toronto to London triggers the dynamic negotiation of a direct site-to-site VPN.
- C. London generates an IKE information message that contains the Toronto public IP address.
- D. Toronto needs to establish a site-to-site tunnel with Hub 2 to bypass Hub 1.
正解：A、B
質問 # 36
Refer to the exhibits.
Which two conclusions for traffic that matches the traffic shaper are true? (Choose two.)
- A. The measured bandwidth is less than 100 KBps.
- B. The traffic shaper drops packets if the bandwidth exceeds 6250 KBps.
- C. The traffic shaper drops packets if the bandwidth is less than 2500 KBps.
- D. The traffic shaper limits the bandwidth of each source IP to a maximum of 6250 KBps.
正解：A、B
質問 # 37
What are two reasons for using FortiManager to organize and manage the network for a group of FortiGate devices? (Choose two )
- A. It acts as a policy compliance entity to review all managed FortiGate devices.
- B. It reduces WAN usage on FortiGate devices by acting as a local FortiGuard server.
- C. It simplifies the deployment and administration of SD-WAN on managed FortiGate devices.
- D. It improves SD-WAN performance on the managed FortiGate devices.
- E. It sends probe signals as health checks to the beacon servers on behalf of FortiGate.
正解：B、C
質問 # 38
Refer to the exhibit.
Based on the exhibit, which statement about FortiGate re-evaluating traffic is true?
- A. The type of traffic defined and allowed on firewall policy ID 1 is UDP.
- B. Firewall policy ID 1 has source NAT disabled.
- C. Changes have been made on firewall policy ID 1 on FortiGate.
- D. FortiGate has terminated the session after a change on policy ID 1.
正解：C
質問 # 39
......
NSE7_SDW-7.0認定ガイドPDFは100%カバー率でリアル試験問題：https://www.passtest.jp/Fortinet/NSE7_SDW-7.0-shiken.html
合格させるNSE7_SDW-7.0レビューガイド、信頼され続けるNSE7_SDW-7.0テストエンジン：https://drive.google.com/open?id=1PQmVtbwpL8A8Cg-ykgHvo1qY62XXZ1Ry